$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 6GLQefqE373I7HLMPHD1UUw6UyPVxfibzVDGmG5tcEo= Subject key identifier: 9B:FE:93:9D:7C:19:EA:55:C0:74:01:3C:6D:BD:B5:1E:B8:73:02:9E Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 0197BBFDBA8A977F2FC496014BE896EEAC0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 12B2 Signing time: Sun 29 Jun 2025 14:00:57 +0000 Manifest this update: Sun 29 Jun 2025 14:00:57 +0000 Manifest next update: Mon 30 Jun 2025 14:00:57 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: zsREzep/V6whc7Kw/cGZq1HHC3Rk+DixAy7M4v9Nq2E=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:fd:ba:8a:97:7f:2f:c4:96:01:4b:e8:96:ee:ac:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jun 29 14:00:57 2025 GMT Not After : Jun 30 14:00:57 2025 GMT Subject: CN=9bfe939d7c19ea55c074013c6dbdb51eb873029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:66:6b:bd:68:0b:f6:33:da:07:e9:11:8c: 64:46:19:94:f2:1c:df:53:89:20:f3:7a:a1:1d:3c: a6:66:37:26:06:0a:9d:a1:75:72:4f:0b:80:0b:fc: 5a:ca:3a:c5:0d:db:95:13:fb:e9:70:6a:12:39:1a: 2c:b4:3f:ff:de:c7:9d:62:12:41:35:a2:06:8d:40: f2:74:aa:24:6c:5f:45:db:42:1a:44:9d:ca:bc:e3: 1b:25:21:3d:19:7f:c4:53:af:f9:fe:8e:a0:e5:63: 1c:00:46:93:45:05:1d:ed:3d:d9:4c:f1:b8:04:0f: 54:e5:88:dd:b0:b6:2e:6c:b0:21:4d:d1:e1:5f:99: 2f:04:61:75:fc:0a:c6:f4:cf:86:73:d9:b9:3d:06: b5:cc:80:ce:75:44:5e:64:aa:e5:ec:71:15:79:75: a2:7c:a0:3f:26:c5:e0:49:ff:0f:57:3d:26:03:fc: 02:35:93:f0:99:cb:89:20:01:2f:a0:23:19:1b:37: cc:c8:26:d2:6f:c9:e2:76:93:cf:b6:44:4b:2e:7f: 00:8c:22:04:01:35:d3:59:33:79:5e:76:65:e4:62: 79:12:c5:44:84:90:2e:7e:a5:f5:58:6e:73:0a:a1: de:ce:a7:bc:25:7e:9a:f9:18:24:88:c1:5f:28:05: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FE:93:9D:7C:19:EA:55:C0:74:01:3C:6D:BD:B5:1E:B8:73:02:9E X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7c:5c:28:f1:9e:43:80:a8:5a:26:f8:d5:c8:53:29:62:9d: 12:b5:7f:53:3b:ae:85:82:96:39:4b:bb:a1:e3:7f:ea:91:0c: ca:17:17:45:2a:7e:c2:1c:81:20:11:a6:7c:25:8c:0a:0d:9c: 32:79:86:01:2a:ae:50:a0:32:8c:b9:51:7a:3c:78:23:26:ad: 64:d9:c6:b2:a1:5b:c7:4b:df:35:0e:45:51:eb:54:91:e2:6c: a3:c8:78:0d:1c:a7:42:04:dd:e4:6f:3a:b6:b2:d7:f0:42:60: 15:b8:3d:ab:ef:fb:70:9d:fc:c4:a3:c6:9a:d5:49:00:c8:6c: 8e:c0:4d:1e:3c:d7:93:06:a8:ad:3c:3a:f7:30:34:cf:aa:35: ed:43:07:e8:90:f6:3d:d7:d9:98:14:35:a2:12:b3:3a:b8:fb: c2:63:0a:de:43:50:83:bd:0f:a5:6f:0a:3b:1c:81:84:b0:04: f6:2c:ae:57:4e:2c:5a:88:9f:67:f6:f7:58:83:69:bf:7d:09: 40:25:1a:d8:c8:0b:1f:96:a3:7f:59:7a:4b:32:7c:5d:d7:2e: e4:f8:56:ab:f6:d6:b3:7c:6c:18:18:36:02:4e:ef:e8:49:eb: ec:45:1e:0c:b1:2c:af:43:8a:d6:23:73:0b:a2:9f:88:75:40: 4b:7b:4e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7/bqKl38vxJYBS+iW7qwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNjI5MTQwMDU3WhcNMjUwNjMwMTQwMDU3WjAzMTEwLwYDVQQD Eyg5YmZlOTM5ZDdjMTllYTU1YzA3NDAxM2M2ZGJkYjUxZWI4NzMwMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8lma71oC/Yz2gfpEYxkRhmU8hzf U4kg83qhHTymZjcmBgqdoXVyTwuAC/xayjrFDduVE/vpcGoSORostD//3sedYhJB NaIGjUDydKokbF9F20IaRJ3KvOMbJSE9GX/EU6/5/o6g5WMcAEaTRQUd7T3ZTPG4 BA9U5YjdsLYubLAhTdHhX5kvBGF1/ArG9M+Gc9m5PQa1zIDOdUReZKrl7HEVeXWi fKA/JsXgSf8PVz0mA/wCNZPwmcuJIAEvoCMZGzfMyCbSb8nidpPPtkRLLn8AjCIE ATXTWTN5XnZl5GJ5EsVEhJAufqX1WG5zCqHezqe8JX6a+RgkiMFfKAWTBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv+k518GepVwHQBPG29tR64cwKeMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnxcKPGe Q4CoWib41chTKWKdErV/UzuuhYKWOUu7oeN/6pEMyhcXRSp+whyBIBGmfCWMCg2c MnmGASquUKAyjLlRejx4IyatZNnGsqFbx0vfNQ5FUetUkeJso8h4DRynQgTd5G86 trLX8EJgFbg9q+/7cJ38xKPGmtVJAMhsjsBNHjzXkwaorTw69zA0z6o17UMH6JD2 PdfZmBQ1ohKzOrj7wmMK3kNQg70PpW8KOxyBhLAE9iyuV04sWoifZ/b3WINpv30J QCUa2MgLH5ajf1l6SzJ8Xdcu5PhWq/bWs3xsGBg2Ak7v6Enr7EUeDLEsr0OK1iNz C6KfiHVAS3tOAQ== -----END CERTIFICATE-----Generated at Sun Jun 29 21:09:46 2025 by rpki-client